← Back to Resources
Industry Compliance12 min read

CBD Payments Compliance Hub: Documentation, Regulations & Risk Management

Everything CBD and hemp businesses need to know about payment processing compliance — from COA requirements and website rules to chargeback prevention and account stability.

By Sol Asefi· Last updated 2026-02-28

Quick Answer

CBD and hemp payment processing compliance centers on three things: (1) proving your products meet the 2018 Farm Bill definition of hemp (0.3% THC or less) through third-party Certificates of Analysis, (2) maintaining a website free of FDA-prohibited health claims with published policies, and (3) keeping your chargeback ratio below 1%. Merchants who maintain these three fundamentals enjoy stable, long-term processing. Unison Payment Solutions provides CBD merchant accounts with dedicated compliance support — call (925) 290-6003 or contact us.

---

Product Compliance: What Underwriters Check

Certificates of Analysis (COAs)

COAs are the foundation of every CBD merchant account application. Acquiring banks require third-party lab results for every product showing:

  • Delta-9 THC content at or below 0.3% (the legal threshold under the 2018 Farm Bill)
  • CBD/cannabinoid content matching your product labels
  • Contaminant testing — heavy metals, pesticides, residual solvents, microbials

COAs must be from an independent, accredited laboratory — not your supplier's in-house lab. They should be current (less than 12 months old) and traceable to the specific batches you are currently selling.

Red flags that cause delays or denials:

  • COAs from non-accredited labs
  • COAs older than 12 months
  • THC results at or near 0.3% (creates regulatory risk)
  • COAs that do not match products currently listed on your website
  • Missing contaminant panels

Product Labeling

Compliant CBD product labels include:

  • Product name and type (tincture, gummy, topical, capsule, flower)
  • CBD content per serving and per container (in milligrams)
  • Full ingredient list with allergens
  • Net weight or volume
  • Batch/lot number (traceable to COA)
  • FDA disclaimer: "Not intended to diagnose, treat, cure, or prevent any disease"
  • Manufacturer or distributor contact information
  • No unapproved health or therapeutic claims

State Licensing

State requirements for CBD businesses vary:

  • Some states require hemp handler, processor, or retailer licenses
  • Some require product registration for specific product types (edibles, supplements)
  • Some require nothing beyond standard business licensing

Even if your state does not require a hemp-specific license, having one strengthens your processor application and demonstrates compliance commitment.

---

Website Compliance Checklist

Your website is the first thing underwriters review and the most common reason applications are delayed. Use this checklist before applying:

Required Pages

  • Refund/return policy — specific to your CBD products, accessible from every page
  • Shipping policy — estimated delivery times, carriers, tracking
  • Terms of service — governing use of your site and purchases
  • Privacy policy — data collection and use disclosures
  • Contact page — phone number, email, and physical address

Content Rules

  • No health claims — remove "cures," "treats," "heals," "prevents," "therapeutic" from all pages
  • No testimonials with therapeutic claims — customer reviews cannot describe medical benefits
  • FDA disclaimer on every product page
  • Accurate product descriptions without exaggerated efficacy claims
  • Age verification or age gate for purchases
  • SSL certificate (HTTPS) active site-wide
  • Product images match actual products
  • Pricing matches what is actually charged at checkout

Common Website Mistakes

  • Blog posts with health claims that contradict compliant product pages
  • Social media embeds containing health claims
  • Before-and-after imagery implying medical outcomes
  • Meta descriptions or title tags with health language
  • Broken links, missing pages, or placeholder content

For the complete approval process, see our CBD Merchant Account Requirements guide.

---

Risk Controls: Keeping Your Account Stable

Chargeback Management

Chargebacks above 1% trigger monitoring programs, reserve increases, or termination. CBD-specific chargeback prevention strategies:

  • Clear billing descriptors — your business name as customers know it, not your legal entity name
  • Chargeback alert servicesEthoca and Verifi intercept disputes before they become chargebacks
  • Proactive communication — order confirmation, shipping notification, and delivery confirmation emails
  • Easy returns — customers who can get refunds from you will not file disputes with their bank
  • 3D Secure — authentication that shifts liability to the card issuer

For detailed strategies, see How to Reduce Chargebacks for CBD Businesses.

Billing Descriptors

Your billing descriptor appears on customer credit card statements. If it does not match your brand name, customers file disputes because they do not recognize the charge. This is the #1 cause of CBD chargebacks.

Good descriptors: "GREENLEAF CBD" or "HEMPHARVEST.COM" Bad descriptors: "ABC HOLDINGS LLC" or "XYZ ENTERPRISES"

Volume Management

Notify your processor before significant volume changes. Unexplained spikes trigger automated risk reviews. Common triggers:

  • Seasonal volume increases (holiday season, 4/20)
  • New marketing campaign launches
  • Wholesale orders creating large single transactions
  • New product launches driving traffic spikes

Product Mix Compliance

Adding product categories not disclosed during underwriting is a termination trigger. Before expanding your product line, discuss with your processor:

  • Delta-8 THC products (different regulatory status than CBD)
  • Kratom, kava, or other botanical supplements
  • Mushroom products (functional vs psilocybin — very different compliance requirements)
  • Vape products (additional age verification and compliance requirements)

---

Common Reasons CBD Accounts Get Declined or Terminated

Application Declines

1. Missing or inadequate COAs 2. Website contains health claims 3. Products with THC above 0.3% 4. No published refund or shipping policies 5. Business registered in a high-risk state for cannabis 6. Previous processor terminations without clear explanation

Account Terminations

1. Chargeback ratio exceeding 1% (prevention guide) 2. Health claims added to website after approval 3. Undisclosed product categories added (Delta-8, kratom, etc.) 4. COAs expired without renewal 5. Volume significantly exceeding projections without notice 6. Customer complaints to the processor 7. Regulatory changes affecting your product category

What To Do If Declined or Terminated

  • Review the reason and address the specific issue
  • Do not apply to another aggregator like Stripe or PayPal — the result will be the same
  • Gather updated compliance documentation
  • Contact Unison for a consultation — we work with previously declined and terminated CBD merchants

---

THC Compliance: 0.3% and What It Means

The 2018 Farm Bill defines hemp as cannabis sativa with a delta-9 THC concentration of 0.3% or less on a dry weight basis. This is the threshold that separates legal hemp from federally prohibited marijuana.

For payment processing purposes:

  • Products at or below 0.3% THC qualify for traditional card processing through a CBD merchant account
  • Products above 0.3% THC require dispensary payment alternatives (PIN debit, ACH, cashless systems)
  • "Total THC" vs "Delta-9 THC" — some states use total THC (including THCa) for compliance; your processor may follow the stricter standard
  • Delta-8 THC products occupy a gray area — derived from hemp but with psychoactive effects that some states have restricted

Testing Best Practices

  • Use ISO 17025 accredited laboratories
  • Test finished products, not just raw ingredients
  • Maintain COAs for every product batch
  • Re-test annually at minimum, more frequently for high-volume products
  • Keep archived COAs for products no longer in production (for chargeback defense)

---

State-by-State Considerations

While CBD is federally legal, state regulations vary:

States with additional CBD restrictions:

  • Idaho — historically strict on THC-free requirements
  • Iowa — specific product type restrictions
  • South Dakota — evolving regulations around hemp products

States with comprehensive hemp programs:

  • Colorado, Oregon, California — established programs with clear compliance pathways
  • Kentucky, Tennessee, North Carolina — major hemp production states with supportive regulations
  • New York — large market with specific labeling and testing requirements

For dispensaries selling THC products: State licensing is mandatory. Payment solutions vary by state regulatory framework. See our dispensary payment solutions page for options.

---

How Unison Payment Solutions Supports CBD Compliance

  • Pre-application compliance review — we audit your website, documentation, and product line before you apply, identifying issues that would cause delays
  • COA guidance — we advise on lab requirements, testing panels, and documentation format
  • Website compliance audit — specific recommendations to make your site underwriting-ready
  • Ongoing monitoring — proactive alerts if your chargeback ratio trends upward
  • Regulatory updates — we notify you of changes affecting CBD payment processing
  • Dedicated account manager — a single point of contact who understands CBD compliance

No monthly fees. No setup fees. No early termination fees. Interchange-plus pricing that saves most CBD merchants 20-30%.

Contact us or call (925) 290-6003 for a free consultation.

Related resources:

Frequently Asked Questions

What is the most important compliance requirement for CBD payment processing?
Third-party Certificates of Analysis (COAs) showing that every product contains 0.3% THC or less. Without current COAs from an accredited lab, no reputable processor will approve your CBD merchant account. This is the non-negotiable foundation of CBD payment compliance.
Can I make health claims about CBD on my website?
No. The FDA has not approved CBD as a dietary supplement, drug, or food additive. Claims that CBD "treats," "cures," "heals," or "prevents" any condition are prohibited and will cause your merchant account application to be denied or your existing account to be terminated. Use factual product descriptions and include the FDA disclaimer.
What chargeback ratio is acceptable for CBD merchants?
Most acquiring banks require CBD merchants to stay below 1% chargeback ratio. Exceeding this threshold can trigger monitoring programs, reserve increases, rate increases, or account termination. Best-in-class CBD merchants maintain ratios below 0.5% using chargeback prevention alerts and clear billing descriptors.
Does LegitScript certification help CBD merchants?
LegitScript does offer a healthcare merchant certification program. While not always required for CBD, having independent compliance verification can strengthen your application and improve approval odds with acquiring banks. Contact Unison to discuss whether LegitScript certification makes sense for your specific CBD business.
What happens if my COAs expire?
Expired COAs create account risk. If your processor reviews your compliance documentation and finds expired lab results, they may request updated COAs within a deadline or increase your reserve. Maintain current COAs for every product and update them at least annually — more frequently for high-volume products.
Can I add Delta-8 THC products to my CBD merchant account?
Possibly, but not without discussing it with your processor first. Delta-8 occupies a different regulatory position than CBD — it is psychoactive and has been restricted by several states. Adding undisclosed product categories is one of the most common reasons CBD accounts get terminated. Always disclose product expansion plans to your processor before listing new items.
What is the difference between hemp and CBD for compliance purposes?
Hemp is the plant; CBD is a compound extracted from it. For payment processing compliance, both fall under the same category and require the same documentation — primarily COAs showing THC at or below 0.3%. Whether you sell raw hemp biomass, CBD tinctures, hemp fiber, or CBD edibles, the compliance fundamentals are the same.
How do I maintain compliance after my CBD merchant account is approved?
Keep COAs current, maintain a website free of health claims, stay below 1% chargeback ratio, communicate volume changes to your processor, and do not add undisclosed product categories. Proactive compliance maintenance is easier and cheaper than dealing with account reviews or terminations.
Is CBD legal in all 50 states?
Hemp-derived CBD with 0.3% THC or less is federally legal under the 2018 Farm Bill. However, some states have additional restrictions on specific CBD product types, labeling requirements, or THC testing standards. Your processor considers both federal and state compliance when evaluating your application.
Where can I find a full list of CBD merchant account requirements?
See our complete guide: CBD Merchant Account Requirements — Documents, Compliance & Approval Tips. It covers every requirement in detail, including COAs, business documentation, website compliance, and tips to speed up approval.

Ready to Optimize Your Payments?

Get a free consultation and rate analysis. See exactly how much you can save.

Get Your Free Quote